QuestionQ162

Privacy Operational Lifecycle: Protect

Which of the following is not a role-based access control?

  • A Need-to-know.
  • B Least privilege.
  • C Segregation of duties.
  • D Restricted data classification.
Explanation

Restricted data classification identifies the sensitivity level of information. It does not itself assign or constrain permissions based on a user’s role, so it is not a role-based access control.

Community Discussion

No comments yet. Be the first to start the discussion!